Science & Tech · Cybersecurity · 3 hrs ago
Up to 6.5 million customer records may be exposed in Japan sushi cyberattack
Ride On Express says up to 6.5 million records may have been exposed after a cyberattack on an outside server.
The company operates the Japanese delivery brands Gin no Sara, Kamatora and Sushi-jo.
The potentially affected information belongs to people who registered through those brands’ websites or apps, and may include names, contact details, birth dates, order histories and hashed passwords.
The company has not confirmed that data was taken, or established how many people may be affected.
People who ordered only by phone, in stores or through Demae-can or Uber Eats are not included, and credit card details are not involved.
The websites and apps remain unavailable for orders, while phone, in-store and delivery-platform orders are still accepted.
The company has notified Japan’s Personal Information Protection Commission and police, and says it will contact potentially affected users; it also urges them to watch for suspicious calls and emails.
Ride On Express Holdings said personal information for up to about 6.5 million users may have been exposed in a cyberattack on an external server.
The affected services are the official websites and apps for Gin no Sara, Kamatora and Sushi Jo.
The company said it had not confirmed clear evidence of data leakage or identified its scope as of October 13.
Orders through the official websites and apps remain suspended, with no restart date in sight.
The company said it had found no secondary harm from misuse of information and is contacting potentially affected users.
- Who
- Ride On Express Holdings and users registered with the official websites or apps for Gin no Sara, Kamatora and Sushi Jo.
- What
- Personal information for up to about 6.5 million people may have been exposed after an external server suffered a ransomware attack.
- When
- The company announced the possible exposure on October 13, 2026. It detected unauthorized access from October 5.
- Where
- Japan; the affected data was stored on an external server. The server operator and its location were not stated.
- Why
- A third party gained unauthorized access to a server operated by an outside provider, which reported a ransomware attack.
This story does not have two clearly opposing sides.
Ride On Express Holdings detected unauthorized access to a server it used and began investigating the attack and possible damage.
Some servers suffered system failures, and the company suspended its systems after the server operator reported a ransomware attack.
The company set up an emergency response team to investigate possible data leakage and consider steps to protect users.
The company announced that personal information for up to about 6.5 million users may have been exposed.
- Potentially affected records
- Up to about 6.5 million
- Brands
- Gin no Sara, Kamatora and Sushi Jo
- Possible information exposed
- Names, addresses, phone numbers, email addresses, dates of birth, hashed passwords, order histories and point-service member IDs
- Not included
- Credit card information; the company said it does not hold it
- Orders still accepted
- By phone, in stores, through Demae-can and Uber Eats
Sources
Related news
Cyberattack disrupts IT systems at three TFG London fashion brands
GitLab fixes maximum-severity flaw that could let attackers run server code
Ledger links CryptoBilis wallet implants to confirmed crypto thefts
Cyberattack Defrosts Refrigerators at Hundreds of French Supermarkets
Ahold Delhaize takes some systems offline after cyberattack
CISA adds five exploited software flaws amid China-linked espionage concerns
SAP fixes maximum-severity flaw in its Python Cloud SDK
Trellix launches on-premises AI tool for security investigations
Only 25% of cybersecurity teams use agentic AI for defense
Cyberattack disrupts internet services at St. Petersburg provider
Canadian cybersecurity executive arrested in ShinyHunters investigation